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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
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3) n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
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DETAILED ACTION 

1. Claims 1-12 are pending in this application and have been examined. 

Response to Arguments 

2. Applicant's arguments with respect to claims 1-12 have been considered 
but are moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 101 

3. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or 
composition of matter, or any new and useful improvement thereof, may obtain a patent 
therefor, subject to the conditions and requirements of this title. 

4. Claims 1-3 are rejected under 35 U.S.C. 101 because the claimed 
invention is directed to non-statutory subject matter. 

Changes have been made via the latest amendment to the language of 
claim 1 by the addition of language directed towards execution on computer 
apparatus. However it is not clear from the language of the claims how the X.509 
certificate can be considered as executable code capable of causing a change in 
a computer apparatus. The X.509 certificate is in fact mere data that another 
program may act upon when it is read out from the memory medium. Claims 1-3 
claim data, which is nonfunctional descriptive material. As such, embodying the 
data on a computer-readable would not make the claims statutory without 
language directed to read-out and execution of computer code so as to cause a 
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computing device to execute the steps coded for. See MPEP 706.03(a) and, 
especially, 2106 IV B 1 (b). 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

6. Claims 1-12 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Shambroom (5923756) and Housley et al., Internet SX.509 Public Key 
Infrastructure Certificate and CRL Profile, Network Working Group, Request for 
Comments 2459. 

As for claim 1, in lines 32-35 of column 10, Shambroom discusses a 
certificate that includes a public key and list of one or more cryptographic 
algorithms supported by the entity associated with the public key. The certificate 
can resemble an X.509 certificate. On pages 574 and 575, Housley describes the 
X.509 certificate V3 in sec. 3.1. As can be seen the certificate includes a section 
(certificate extension) that identifies the algorithm, parameters, and a public key. 
There is also a section for a signature. These read on the first clause of 
applicant's first claim as amended. The list of algorithms disclosed in 
Shambroom also anticipates an extension for identifying at least one alternative 
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algorithm. In addition, Housley also teaches the use of alternative algorithms in 
Sec. 4.2 Certificate Extensions, particularly in sec. 4.2.1.1 Authority Key Identifier 
and sec. 4.1 .1 .2 Subject Key Identifier. In these two sections and in sec. 7.2 
Signature Algorithms and 7.3 Subject Public Key Algorithms Housley teaches 
that the subject key and the signing authority key may individually be any 
algorithm type. Shambroom does not dictate that a second public key and 
signature therefore be included in the certificate or used as an alternative means 
of protecting data included within the certificate. However Housley does explicitly 
teach this (certificate extension) feature in Sections 7.2 and 7.3. Therefore it 
would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to configure an X.509 certificate to utilize alternative 
signatures formed with different algorithms on data contained within the 
certificate as taught by Housley, thereby protecting the data from compromise. It 
would have been desirable to do so since utilization of alternative algorithms 
would increase the difficulty in unauthorized access to the protected data within 
the certificate. 

As for claim 3, both of the signatures taught by the combination of 
Shambroom, and Housley can verify at least part of the certificate, as is taught 
for example at 4. 1 .2.5 of Housley. 
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7. Claim 2 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Shambroom and Housley, and further in view of Schneier: Applied Cryptography 
2"^ Edition. 

As for claim 2, the combination of Shambroom and Housley fails to teach 
a first and second alternative algorithm that are RSA and elliptic curve 
respectively. However, Housley does teach that the subject key and signing key 
may be any algorithm, and Schneier, teaches the use of RSA public key 
algorithms beginning on page 17, and teaches elliptic curve public key systems 
on pages 480-481 . Therefore it would have been obvious to a person of ordinary 
skill in the art at the time the invention was made to support RSA and an elliptic 
curve cryptosystem with the X.509 certificate taught by Shambroom and 
Housley. It would have been desirable to do so as this would allow for tailoring 
the computational workload for the signer and recipient of the certificate and 
thereby increase the utility of the system. Housley teaches the use of non-critical 
certificate extensions in sec. 4.2 certificate extensions. 

8. Claims 4-12 contain claims directed towards: a method of using the 
certificate of claims 1-3, a system for employing the certificate of claims 1-3, and 
a computer program product that directs a system to utilize the certificate of 
claims 1-3. Claims 4-12 recite substantially the same limitations as do claims 1-3, 
and are therefore rejected on the same grounds as are those claims. 
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Conclusion 


9. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Paul E. Callahan whose telephone number is 
(571) 272-3869. The examiner can normally be reached on M-F from 9 to 5. 

If attempts to reach the examiner by telephone are unsuccessful, the 
Examiner's supervisor, Emmanuel Moise, can be reached on (571) 272-3865. 
The fax phone number for the organization where this application or proceeding 
is assigned is: (571) 273-8300. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). 


/Paul E. Callahan/ 
August 9, 2007 
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